An administrator receives an alert with the TTP DATA_TO_ENCRYPTION. What is known about the alert based on this TTP even if other parts of the alert are unknown?
A.
A process attempted to delete encrypted data on the disk.
B.
A process attempted to write a file to the disk.
C.
A process attempted to modify a monitored file written by the sensor.
D.
A process attempted to transfer encrypted data on the disk over the network.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
rhuanca
3 years, 4 months ago